Share via

QueryLogJobDefinition may be exhausting the SQL connection pool

Colotta Jerrae 60 Reputation points
2026-03-11T07:50:40.3633333+00:00

After installing the March 2026 Cumulative Update (KB5002843) on our SharePoint Server Subscription Edition farm (build 16.0.19725.20076), we started seeing intermittent search failures. ULS logs show frequent 6399 events from the QueryLogJobDefinition timer job reporting that the timeout expired before a SQL connection could be obtained from the pool. Crawling and indexing appear healthy, but search queries across the farm occasionally fail. The environment is SharePoint SE on Windows Server 2025 with SQL Server 2022.

It looks like QueryLogJobDefinition may be exhausting the SQL connection pool (Max Pool Size reached), possibly due to a connection leak introduced in the update. Restarting the SharePoint Timer Service (SPTimerV4) temporarily resolves the issue, but it returns after about 48–72 hours. Is there a known regression fix for this in build 16.0.19725.20076, or could it be related to the newer Hybrid Search onboarding changes?

Microsoft 365 and Office | SharePoint Server | Development
0 comments No comments
{count} votes

Answer accepted by question author
  1. Steven-N 22,485 Reputation points Microsoft External Staff Moderator
    2026-03-11T09:23:13.38+00:00

    Hi Colotta Jerrae

    As far as I know, at the moment, Microsoft has not published an official known issue specific to KB5002843 that directly addresses this behavior.

    However, this pattern closely matches a previously known issue where the Search Query Logging timer job did not consistently release SQL connections, eventually exhausting the SQL connection pool over time.

    However, the following approaches can help you reduce the impact:

    • As a temporary mitigation, restarting the SharePoint Timer Service (SPTimerV4) on a scheduled basis can help clear stale SQL connections and prevent prolonged search failures.
    • If search query analytics are not critical for your organization, disabling the Search Query Logging timer job is an effective way to prevent further SQL pool exhaustion.
    • Increasing the SQL connection pool size may delay the issue, but it should be treated as a short-term mitigation rather than a long-term solution if a connection leak is present.

    Additionally, based on current information, there is no clear indication that these Hybrid Search changes directly cause the SQL connection pool exhaustion observed with QueryLogJobDefinition.

    Hope my answer will help you, for any further concern, kindly let me know in the comment section.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".     

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-11T07:50:53.4633333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    There is no information in the provided materials that identifies a known regression or hotfix in SharePoint Server Subscription Edition build 16.0.19725.20076 related to QueryLogJobDefinition exhausting the SQL connection pool, nor anything tying this behavior to the newer hybrid search onboarding changes.

    The context does cover several adjacent areas (SharePoint timer jobs, search issues after .NET updates, SQL connection pooling behavior, and hybrid search TLS/cipher requirements), but none of them document a QueryLogJobDefinition-specific leak or a CU-level regression for the build mentioned.

    Because of that, no product-level fix, KB reference, or configuration change specific to this QueryLogJobDefinition issue can be confirmed from the available documentation.


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.